Data Protection Engineer

IntraEdge; Bengaluru; On-site; INR 1,500,000 - 2,800,000; Full time

Job summary

IntraEdge in Bengaluru seeks a highly skilled Data Protection Engineer to design and implement secure data protection across cloud environments. You will focus on encryption, secure network design, and compliance-driven security frameworks to safeguard sensitive data.

The role requires hands-on experience with AWS security services, cryptography, DLP tools, and multi-cloud awareness. You will collaborate with DevOps and engineering teams to embed security best practices into CI/CD pipelines and

Qualifications

• Strong experience with AWS cloud platform and security services.
• In-depth knowledge of cryptography principles (encryption algorithms, hashing, PKI, TLS/SSL).
• Hands-on experience with key management systems and secure key lifecycle management.
• Strong understanding of cloud networking and security architecture.
• Experience with data protection, DLP tools, and access control mechanisms.
• Familiarity with network security protocols, firewalls, and intrusion detection systems.
• Proficiency in scripting or programming (Python, Bash, or similar).
• Strong analytical, problem-solving, and troubleshooting skills.

Responsibilities

• Design and implement data protection strategies across cloud and distributed systems.
• Develop and manage encryption solutions (data-at-rest, data-in-transit, and key management).
• Work with AWS security services such as KMS, IAM, CloudHSM, Secrets Manager, and Shield.
• Architect and secure cloud networking (VPCs, subnets, VPNs, PrivateLink, security groups, NACLs).
• Ensure compliance with industry standards such as ISO 27001, SOC2, GDPR.
• Implement data loss prevention (DLP) mechanisms and monitoring tools.
• Conduct security risk assessments, vulnerability analysis, and threat modeling.
• Collaborate with DevOps and engineering teams to embed security best practices into CI/CD pipelines.
• Monitor and respond to security incidents related to data breaches or vulnerabilities.
• Maintain documentation of security architectures, policies, and procedures.

Skills

AWS security

Cryptography

Key management

Cloud networking

Data protection

DLP tools

Access control

Network security

Python/Bash

Threat modeling

Tools

KMS

IAM

CloudHSM

Secrets Manager

Job description

We are seeking a highly skilled Data Protection Engineer with strong expertise in AWS, Cryptography, and Cloud Networking to design and implement secure data protection solutions across cloud environments. The ideal candidate will be responsible for safeguarding sensitive data through encryption, secure network design, and compliance-driven security frameworks.

Key Responsibilities

• Design and implement data protection strategies across cloud and distributed systems.
• Develop and manage encryption solutions (data-at-rest, data-in-transit, and key management).
• Work with AWS security services such as KMS, IAM, CloudHSM, Secrets Manager, and Shield.
• Architect and secure cloud networking (VPCs, subnets, VPNs, PrivateLink, security groups, NACLs).
• Ensure compliance with industry standards such as ISO 27001, SOC2, GDPR, and other regulatory frameworks.
• Implement data loss prevention (DLP) mechanisms and monitoring tools.
• Conduct security risk assessments, vulnerability analysis, and threat modeling.
• Collaborate with DevOps and engineering teams to embed security best practices into CI/CD pipelines.
• Monitor and respond to security incidents related to data breaches or vulnerabilities.
• Maintain documentation of security architectures, policies, and procedures.

Required Skills & Qualifications

• Strong experience with AWS cloud platform and security services.
• In-depth knowledge of cryptography principles (encryption algorithms, hashing, PKI, TLS/SSL).
• Hands‑on experience with key management systems and secure key lifecycle management.
• Strong understanding of cloud networking and security architecture.
• Experience with data protection, DLP tools, and access control mechanisms.
• Familiarity with network security protocols, firewalls, and intrusion detection systems.
• Proficiency in scripting or programming (Python, Bash, or similar).
• Strong analytical, problem‑solving, and troubleshooting skills.

Preferred Qualifications

• Experience with multi‑cloud environments (Azure, GCP).
• Knowledge of Zero Trust architecture and secure access frameworks.
• Familiarity with container security (Docker, Kubernetes).
• Relevant certifications such as AWS Certified Security – Specialty, CISSP, CISM, or CEH.
• Experience with security automation and MLOps/DevSecOps practices.